Skip to content

Bump the go-dependencies group with 10 updates#755

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-c02814aab6
Open

Bump the go-dependencies group with 10 updates#755
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-c02814aab6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 19, 2026

Bumps the go-dependencies group with 10 updates:

Package From To
github.com/Azure/azure-sdk-for-go/sdk/azcore 1.21.0 1.21.1
github.com/fatih/color 1.18.0 1.19.0
github.com/hashicorp/go-version 1.8.0 1.9.0
github.com/open-policy-agent/gatekeeper/v3 3.22.0 3.22.2
golang.org/x/mod 0.32.0 0.34.0
helm.sh/helm/v3 3.20.2 3.21.0
k8s.io/api 0.35.2 0.35.3
k8s.io/apimachinery 0.35.2 0.35.3
k8s.io/cli-runtime 0.35.2 0.36.0
k8s.io/client-go 0.35.2 0.36.0

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.0 to 1.21.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.21.1

1.21.1 (2026-04-16)

Bugs Fixed

  • Fixed an issue in ResponseError.Error() where the request URL path was being logged unescaped.
  • Redact query parameters when logging errors.
  • For runtime.JoinPaths, don't add a slash between root and paths when paths starts with ? (query string).

Other Changes

  • Upgraded to Go 1.25.0.
  • Upgraded dependencies.
Commits

Updates github.com/fatih/color from 1.18.0 to 1.19.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.19.0

What's Changed

New Contributors

Full Changelog: fatih/color@v1.18.0...v1.19.0

Commits
  • ca25f6e Merge pull request #266 from fatih/dependabot/github_actions/actions/setup-go-6
  • 1205984 Bump actions/setup-go from 5 to 6
  • 5715c20 Merge pull request #269 from UnSubble/main
  • 2f6e200 Merge branch 'main' into main
  • f72ec94 Merge pull request #273 from fatih/dependabot/github_actions/actions/checkout-6
  • 848e633 Merge branch 'main' into main
  • 4c2cd34 Add tests
  • 7f812f0 Bump actions/checkout from 4 to 6
  • b7fc9f9 Merge pull request #259 from fatih/dependabot/github_actions/dominikh/staticc...
  • 239a88f Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0
  • Additional commits viewable in compare view

Updates github.com/hashicorp/go-version from 1.8.0 to 1.9.0

Release notes

Sourced from github.com/hashicorp/go-version's releases.

v1.9.0

What's Changed

Enhancements

Internal

New Contributors

Full Changelog: hashicorp/go-version@v1.8.0...v1.9.0

Changelog

Sourced from github.com/hashicorp/go-version's changelog.

1.9.0 (Mar 30, 2026)

ENHANCEMENTS:

Support parsing versions with custom prefixes via opt-in option in hashicorp/go-version#79

INTERNAL:

Commits
  • b80b1e6 Update CHANGELOG for version 1.9.0 (#187)
  • e93736f Bump the github-actions-backward-compatible group across 1 directory with 2 u...
  • c009de0 Bump actions/upload-artifact from 6.0.0 to 7.0.0 in the github-actions-breaki...
  • 0474357 Update GitHub Actions to trigger on pull requests and update go version (#185)
  • b4ab5fc Support parsing versions with custom prefixes via opt-in option (#79)
  • 25c683b Merge pull request #182 from hashicorp/dependabot/github_actions/github-actio...
  • 4f2bcd8 Bump the github-actions-backward-compatible group with 3 updates
  • acb8b18 Merge pull request #180 from hashicorp/dependabot/github_actions/github-actio...
  • 0394c4f Merge pull request #179 from hashicorp/dependabot/github_actions/github-actio...
  • b2fbaa7 Bump the github-actions-backward-compatible group across 1 directory with 2 u...
  • Additional commits viewable in compare view

Updates github.com/open-policy-agent/gatekeeper/v3 from 3.22.0 to 3.22.2

Release notes

Sourced from github.com/open-policy-agent/gatekeeper/v3's releases.

v3.22.2

Bug Fixes

v3.22.1

⚠️ v3.22.1 had a failure while publishing release artifacts. Please make sure to use v3.22.2 release instead.

Bug Fixes

Chores

Commits
  • eda110b chore: Prepare v3.22.2 release (#4542)
  • a6d8790 fix: gh cli to support immutable releases (CP #4522) (#4541)
  • f5be0db chore: Prepare v3.22.1 release (#4517)
  • a97a05c chore: bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp...
  • 5f51c93 fix: clean up stale VAPB when vap.k8s.io removed from constraint (CP #4446) (...
  • ba2c5fe chore: bump kubectl from v1.35.2 to v1.35.3 (CP #4458) (#4497)
  • e7a7177 fix: restore mutator conflict propagation via events channel (CP #4478) (#4496)
  • f3069d0 fix: share StatsReporter across mutator controllers CP (#4465) (#4487)
  • b33db56 fix: retry VAP API discovery on transient failures CP(#4455) (#4485)
  • c874d39 chore: bump google.golang.org/grpc from 1.78.0 to 1.79.3 (#4488)
  • Additional commits viewable in compare view

Updates golang.org/x/mod from 0.32.0 to 0.34.0

Commits
  • 1ac721d go.mod: update golang.org/x dependencies
  • fb1fac8 all: upgrade go directive to at least 1.25.0 [generated]
  • 27761a2 go.mod: update golang.org/x dependencies
  • See full diff in compare view

Updates helm.sh/helm/v3 from 3.20.2 to 3.21.0

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.21.0 is a feature release. Users are encouraged to upgrade for the best experience.

[!WARNING] Helm v3 is approaching end-of-life. Please update to Helm v4.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Kubernetes client libraries to v1.36
  • notable changes here

Installation and Upgrading

Download Helm v3.21.0. The common platform binaries are here:

This release was signed by @​gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.21.1 will contain only bug fixes.
  • 3.22.0 is the next feature release for Kubernetes v1.37

Changelog

  • [v3] Bump to version v3.21 e0878d41b711792be60777fd65ad23a101e6b85f (George Jenkins)
  • fix: upgrade opentelemetry packages to patch CVEs 13d5fc4ae0e7222e1af8796ff4fa467b52208471 (Terry Howe)
  • fix: Chart dot-name path bug 2552884e3bc1b763c3901c5ea7240b59ef6791f1 (George Jenkins)
  • fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow ec05dd5f0481c2de3a41a554adf3c52a6a2a9bb6 (Terry Howe)
  • add image index test b0dfec5af4d7f642d8dea3b9058856541fe5017c (Pedro Tôrres)

... (truncated)

Commits
  • e0878d4 [v3] Bump to version v3.21
  • 4d4902c Merge pull request #32041 from TerryHowe/fix/upgrade-otel-cves
  • 13d5fc4 fix: upgrade opentelemetry packages to patch CVEs
  • a60cb79 Merge commit from fork
  • d3bc853 Merge pull request #32026 from gjenkins8/gjenkins/code_action_pin_v3
  • 2552884 fix: Chart dot-name path bug
  • ec05dd5 fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow
  • 6d809b2 Merge pull request #31883 from t0rr3sp3dr0/pedrotorres/backport-31776-to-v3
  • b0dfec5 add image index test
  • e629995 fix pulling charts from OCI indices
  • Additional commits viewable in compare view

Updates k8s.io/api from 0.35.2 to 0.35.3

Commits

Updates k8s.io/apimachinery from 0.35.2 to 0.35.3

Commits

Updates k8s.io/cli-runtime from 0.35.2 to 0.36.0

Commits
  • c5507e3 Update dependencies to v0.36.0 tag
  • 9157a44 Merge remote-tracking branch 'origin/master' into release-1.36
  • fb4f11d Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • 08a1cd8 Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
  • 579d47f Merge pull request #137843 from pacoxu/cobra-v1.10.2
  • e545712 dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps
  • f392d21 bump spf13/cobra to v1.10.2
  • b0a204f Merge pull request #137298 from dims/dsri/cri-streaming-option-a-hardcut
  • e723dad Merge pull request #136792 from rata/userns-goes-ga
  • 18f8342 Merge pull request #137495 from pohly/klog-update
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.35.2 to 0.36.0

Commits
  • 1d95f02 Update dependencies to v0.36.0 tag
  • f22a53e Merge remote-tracking branch 'origin/master' into release-1.36
  • a948641 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  • 7e44ffc Add Workload-Aware Preemption fields to Workload and PodGroup APIs
  • df2d882 Merge pull request #136989 from nojnhuh/podgroup-resourceclaim
  • 4eece52 Workload API: PodGroup ResourceClaims (KEP-5729)
  • 3d35c51 Merge pull request #137190 from everpeace/KEP-5491-alpha
  • 0434117 Merge pull request #137028 from nmn3m/feature/dra-resource-pool-status
  • ba785be Drop CSR analogy, mark ObjectMeta +required,reduce limits (maxItems=500, maxL...
  • 4a9c878 Add ResourcePoolStatusRequest API types and generated code
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-dependencies group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.21.0` | `1.21.1` |
| [github.com/fatih/color](https://github.com/fatih/color) | `1.18.0` | `1.19.0` |
| [github.com/hashicorp/go-version](https://github.com/hashicorp/go-version) | `1.8.0` | `1.9.0` |
| [github.com/open-policy-agent/gatekeeper/v3](https://github.com/open-policy-agent/gatekeeper) | `3.22.0` | `3.22.2` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.32.0` | `0.34.0` |
| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.20.2` | `3.21.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.35.2` | `0.35.3` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.35.2` | `0.35.3` |
| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.35.2` | `0.36.0` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.35.2` | `0.36.0` |


Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.21.0 to 1.21.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.21.0...sdk/azcore/v1.21.1)

Updates `github.com/fatih/color` from 1.18.0 to 1.19.0
- [Release notes](https://github.com/fatih/color/releases)
- [Commits](fatih/color@v1.18.0...v1.19.0)

Updates `github.com/hashicorp/go-version` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/hashicorp/go-version/releases)
- [Changelog](https://github.com/hashicorp/go-version/blob/main/CHANGELOG.md)
- [Commits](hashicorp/go-version@v1.8.0...v1.9.0)

Updates `github.com/open-policy-agent/gatekeeper/v3` from 3.22.0 to 3.22.2
- [Release notes](https://github.com/open-policy-agent/gatekeeper/releases)
- [Changelog](https://github.com/open-policy-agent/gatekeeper/blob/master/docs/RELEASE.md)
- [Commits](open-policy-agent/gatekeeper@v3.22.0...v3.22.2)

Updates `golang.org/x/mod` from 0.32.0 to 0.34.0
- [Commits](golang/mod@v0.32.0...v0.34.0)

Updates `helm.sh/helm/v3` from 3.20.2 to 3.21.0
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.20.2...v3.21.0)

Updates `k8s.io/api` from 0.35.2 to 0.35.3
- [Commits](kubernetes/api@v0.35.2...v0.35.3)

Updates `k8s.io/apimachinery` from 0.35.2 to 0.35.3
- [Commits](kubernetes/apimachinery@v0.35.2...v0.35.3)

Updates `k8s.io/cli-runtime` from 0.35.2 to 0.36.0
- [Commits](kubernetes/cli-runtime@v0.35.2...v0.36.0)

Updates `k8s.io/client-go` from 0.35.2 to 0.36.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.35.2...v0.36.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/fatih/color
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/hashicorp/go-version
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/open-policy-agent/gatekeeper/v3
  dependency-version: 3.22.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: golang.org/x/mod
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: k8s.io/api
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: k8s.io/cli-runtime
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants